Privacy Policy Contents
Important Note: By registering or continuing to use the panda95 platform, you are deemed to have read and agreed to this Privacy Policy in full. Please read this document carefully before providing us with any personal information.
1Information We Collect
Panda95 collects your personal information through several methods when you use our platform. This information is necessary to ensure you enjoy a safe, seamless, and personalized experience. The following are the categories of information we collect:
Account Registration Information:
- Full name: As it appears on your national ID or passport.
- National identity card number (MyKad) or passport: Used for identity verification (KYC) purposes.
- Active email address: For official communications, transaction notifications, and account recovery.
- Malaysian mobile phone number: For OTP verification and security notifications.
- Date of birth: To verify that you meet the minimum age requirement of 18 years.
- Password: Stored in hashed form using the bcrypt algorithm — we do not store passwords in plain text.
Financial Information:
- Bank account holder name, bank name, and bank account number for deposit and withdrawal processing.
- Digital wallet information (Touch 'n Go eWallet, GrabPay, Boost) if used as a payment method.
- Transaction records including amounts, timestamps, and payment methods.
Platform Usage Information:
- Records of gaming activity, bets placed, and win history.
- IP address, device type, web browser type, and operating system.
- Login and logout timestamps, as well as in-account activity.
- Geographic location information based on IP address (not GPS).
Communication Information:
- Live chat content with our customer support team.
- Emails or messages you send to us.
- Feedback, complaints, or suggestions you provide.
2How We Use Your Information
Every piece of information we collect has a clear and legitimate purpose. We do not use your data for purposes unrelated to the services you use. The following are the primary purposes for which your personal information is used:
- Account management: Creating and maintaining your account, including password recovery and identity verification.
- Transaction processing: Ensuring deposits and withdrawals are processed accurately and securely to the correct account.
- KYC and AML Compliance: Meeting legal requirements related to identity verification and anti-money laundering.
- Service improvements: Analyzing usage patterns to improve platform performance, load speed, and overall user experience.
- Security and fraud prevention: Detecting suspicious activity, preventing unauthorized access, and protecting platform integrity.
- Service communications: Sending important notices related to accounts, policy changes, and security updates.
- Promotions and personalized offers: With your consent, we send information about bonuses, promotions, and exclusive offers relevant to your interests.
- Customer support: Resolving complaints, answering inquiries, and providing the necessary technical assistance.
Legal Basis for Data Processing: The processing of your data is carried out on the basis of contract performance (user agreement), legal obligations (PDPA, AML), our legitimate interests in operating a safe business, and your consent for marketing communications.
3Information Sharing
Panda95 does not sell, rent, or disclose your personal information to third parties without a valid reason. However, there are certain situations where sharing information is necessary and permitted:
- Payment service providers: Banking institutions, digital wallet providers, and approved payment processors to facilitate your financial transactions. They receive only the information necessary to complete the transaction.
- KYC service providers: Approved third parties for identity and document verification in compliance with regulatory requirements.
- Authorities and law enforcement agencies: When required by Malaysian law, court order, or official investigation by the relevant authorities.
- Technical service providers: Companies providing technology infrastructure, server hosting, and cybersecurity services — all subject to strict confidentiality agreements.
- Data and performance analytics: Only in the form of aggregated data that cannot identify individuals, used to analyse overall platform performance.
All third parties who receive your data are bound by data protection agreements that require them to handle your information to a security standard equal to or higher than our own.
4Data Retention Period
We retain your personal data only for as long as necessary to fulfil the purposes stated in this policy or as required by applicable law. The following are our data retention guidelines:
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account information | Throughout the active account period | Required for account operations |
| Financial transaction records | 7 years | AML/PDPA Legal Requirements |
| Security activity logs | 2 years | Fraud prevention & audit |
| KYC Documents | 5 years after account closure | Regulatory Compliance |
| Customer support logs | 1 year | Referrals & improvements |
| Marketing data (with consent) | Until consent is withdrawn | Based on user preference |
Once the retention period expires, your data will be securely deleted using methods that comply with information security standards, or converted into an anonymised form that cannot be identified.
5Your Rights as a User
Under Malaysia's Personal Data Protection Act (PDPA) 2010 and international best practices, you have the following rights regarding your personal data held by panda95:
To exercise any of the rights above, contact our data protection team at [email protected] with the subject line "Privacy Rights Request". We will process your request within 30 business days. In complex cases, this period may be extended by up to 60 days with prior notice to you.
Identity Verification Required: To protect the security of your account, we may require identity verification before processing data rights requests. This ensures we do not disclose your information to unauthorised parties.
6Cookies and Tracking Technologies
Panda95 uses cookies and similar tracking technologies to enhance user experience and ensure the platform functions properly. The following are the types of cookies we use:
- Essential Cookies: Required for core platform functions such as login sessions, security, and language preferences. These cookies cannot be disabled without affecting platform functionality.
- Performance cookies: Collecting information on how pages are used to help us improve platform performance and speed. All data is collected anonymously.
- Functional cookies: Remembering your preferences and settings such as default bet size, display theme, and language settings.
- Analytics cookies: Used to understand overall platform usage patterns for continuous improvement purposes. This data is not linked to your personal identity.
You can manage or delete cookies through your web browser settings at any time. However, disabling essential cookies may affect your ability to log in or use certain platform features.
7Data Security
Panda95 takes serious investment in data security infrastructure. We employ a combination of technical measures and operational procedures to ensure your information remains protected at all times:
- Data encryption in transit: All communication between your browser and our servers is secured with TLS 1.3 — the latest and most secure encryption protocol available.
- Data encryption at rest: Data stored in our databases is encrypted using AES-256, including financial information and KYC documents.
- Two-factor authentication (2FA): Available and recommended for all users to add an extra layer of protection to your account.
- 24/7 Monitoring: Our cybersecurity team monitors platform activity around the clock to detect any threats or unauthorized access attempts.
- Regular penetration testing: Our platform undergoes regular security testing by independent experts to identify and address any potential vulnerabilities.
- Staff training: All staff who handle user data undergo rigorous data protection and information security training.
If You Suspect a Security Breach: If you notice any suspicious activity on your account or believe your information may have been compromised, contact our support team immediately at [email protected]. We will respond within 2 hours during operating hours.
8Privacy Policy Changes
Panda95 reserves the right to update or modify this Privacy Policy from time to time in line with changes in law, technology, or our business operations. Whenever a significant change occurs, we will:
- Displaying a clear notice on the platform's home page at least 14 days before the changes take effect.
- Sending email notices to all registered users with active accounts.
- Updating the "Last Updated" date at the top of this document.
- Archiving previous versions of the Privacy Policy for 2 years as reference.
Continued use of the panda95 platform after the effective date of any changes constitutes your acceptance of the latest version of this Privacy Policy. If you disagree with the changes made, you have the right to close your account and request data deletion in accordance with the procedure outlined in Section 5.
9Contact Us
If you have any questions, concerns, or complaints regarding this Privacy Policy or how we handle your personal data, our Data Protection Officer (DPO) team is ready to assist:
- Email: [email protected] (subject: "Privacy Inquiry")
- Response time: Within 2 business days for general enquiries; 24 hours for urgent security issues
- Accepted languages: Bahasa Melayu and English
- Support operating hours: 24 hours a day, 7 days a week including public holidays
Right to Lodge a Complaint: If you are unsatisfied with our response to a privacy-related request, you have the right to lodge a complaint with the Personal Data Protection Commissioner of Malaysia under the provisions of PDPA 2010.